Security center

See your business the way an attacker does.

One place for everything security: a free passive scan, 22 tools you can run on any domain, our research on the Zimbabwean web, and founder-led testing when you need a person on it.

10-second check

How secure is your website?

Enter your site and get an instant, free security score. No login, nothing intrusive.

We only read public information: no port scanning, no exploitation.

What the grade means

From grade F to grade A.

Missing headers, old encryption and files left public are the usual reasons a site scores badly. Each one has a fix. Run the scan above to see where yours stands.

From grade F to grade A, 33 seconds. A fictional site and a sample report

Who we secure

Tested around what your sector has to protect

The risk sits in different places for a school, a clinic or a lender. Your exact scope is agreed in writing before any testing starts, whichever sector you are in.

  • Schools, colleges and training providers

    Learner records, fee payments and parent portals, often holding data about minors.

    What we test: Student and parent portals, enrolment and fee forms, staff email and admin accounts.

    Security for this sector
  • Clinics and healthcare

    Patient records, some of the most sensitive data the Cyber and Data Protection Act covers.

    What we test: Patient portals and booking systems, what each staff role can see, remote access.

    Security for this sector
  • Law firms

    Client files and privileged email, exactly what an attacker or a rival would want.

    What we test: Email and document portals, staff accounts, file sharing and access settings.

    Security for this sector
  • Travel agencies and tour operators

    Bookings that carry passport details, and card or mobile money payments.

    What we test: Booking engines and payment pages, customer accounts, admin panels.

    Security for this sector
  • Finance, microfinance and fintech

    Loan, payment and mobile money flows that move real money.

    What we test: Customer portals and the APIs behind them, transaction and approval logic, one customer reaching another's data.

  • NGOs and development organisations

    Beneficiary and donor records, often spread across partner systems.

    What we test: Data collection and reporting systems, staff email, shared drives and partner access.

Not on the list? The same method applies to any business with a website, an app or customer data. Tell us what you run.

The toolkit

22 free tools. No login, nothing intrusive.

Every one is passive and read-only. Run them on your own domain in seconds.

Scan & assess

Email & domain

Attack surface

Passwords & exposure

Awareness & business